This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          T+PUrGn7TtckjwOa5Y98i68wkEFta1MWIKh3GKiyJjc=
Subject key identifier:   3A:A4:AE:D1:CA:B2:DF:48:BF:A7:61:08:0C:68:74:EE:B8:82:E7:87
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          04E1
Signing time:             Wed 10 Dec 2025 22:19:47 +0000
Manifest this update:     Wed 10 Dec 2025 22:19:46 +0000
Manifest next update:     Wed 17 Dec 2025 22:19:46 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: NjuTRHbgM+qhMsHwlVjMtdVJY9V7cHDQLRGOkTLLZvI=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 22:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Dec 10 22:19:46 2025 GMT
            Not After : Dec 17 22:19:46 2025 GMT
        Subject: CN=6939f203-ae49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:29:aa:7b:76:49:2a:c1:6b:be:e4:27:e5:
                    7f:30:90:69:f8:11:81:c1:34:b6:66:13:97:23:2a:
                    20:85:39:20:27:1e:5a:bf:d4:c1:25:d4:ca:28:24:
                    9e:6c:97:a6:2c:de:dc:43:1d:79:73:a6:81:77:fa:
                    2f:43:ec:7f:29:13:8f:0e:7d:bc:6a:36:80:f9:c5:
                    00:9e:34:14:e1:f5:97:e6:0d:37:cb:a9:84:09:de:
                    58:f9:80:15:88:a7:d1:0e:c1:02:5a:ef:34:4f:48:
                    30:50:d5:d0:af:2f:87:bb:70:a0:27:90:d5:cf:dd:
                    e5:84:d2:9d:68:6b:ee:58:ec:a7:9a:19:e2:53:e4:
                    98:fd:3d:33:c8:1d:f8:cb:21:3f:9e:63:ed:72:08:
                    8f:10:2b:14:b0:0a:d6:a5:66:d6:9f:39:59:70:92:
                    db:97:d6:3a:1f:2b:0e:66:af:9f:c6:d5:82:be:77:
                    86:2f:79:79:be:c6:3e:79:b5:c0:b1:69:2c:b7:7c:
                    9a:e5:d4:c4:da:b4:9a:50:89:f4:db:17:ba:3a:cb:
                    ad:5e:f5:c3:0b:49:eb:0c:8a:86:19:53:da:f8:87:
                    01:28:da:10:f9:59:b5:97:07:d9:ac:e8:7d:70:94:
                    32:94:d9:6b:27:8e:88:17:c3:c7:5a:5d:1a:ea:76:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A4:AE:D1:CA:B2:DF:48:BF:A7:61:08:0C:68:74:EE:B8:82:E7:87
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:04:26:0e:ae:ca:04:1a:88:1e:a4:85:de:74:cb:76:36:
         0c:1f:9a:4f:cd:e3:a6:f3:42:ff:76:1d:c2:0c:6e:e8:7b:85:
         ea:76:bd:7a:81:b4:ff:72:87:3d:12:10:98:91:85:af:92:ca:
         26:9f:6a:53:ff:34:9e:e7:38:0c:21:12:3d:98:d5:e4:22:5a:
         60:32:a1:4e:99:85:cd:e8:e2:85:23:07:4e:5a:3f:18:df:ca:
         25:ef:c5:53:98:0c:82:43:b6:4f:29:f6:c9:48:26:4d:04:ea:
         0f:f9:02:83:32:d6:1f:c9:72:80:2f:86:8b:8f:ea:fa:fe:f6:
         a4:c9:c7:71:25:72:f1:eb:eb:7c:f9:dd:29:6c:86:94:a1:c3:
         c7:48:b2:de:24:fb:64:80:62:18:19:6d:b9:89:c5:fa:ac:65:
         0a:e8:70:4f:64:28:39:b2:15:c2:ef:98:b8:cf:d7:8b:af:47:
         2e:5a:ca:13:fe:8a:7f:82:55:77:a2:73:47:1a:3d:61:8e:f5:
         ff:8d:3d:87:54:8c:a1:ad:fd:03:dd:10:76:ad:0c:21:2d:b0:
         c5:6b:9c:df:19:82:c5:e1:76:01:90:6b:df:99:58:d2:82:a0:
         e0:3e:88:ae:5d:9d:80:8a:9b:a9:88:92:9e:5c:bb:9f:18:e4:
         7f:b8:cf:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG
OUExNDJFRjkwHhcNMjUxMjEwMjIxOTQ2WhcNMjUxMjE3MjIxOTQ2WjAYMRYwFAYD
VQQDEw02OTM5ZjIwMy1hZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk5spqnt2SSrBa77kJ+V/MJBp+BGBwTS2ZhOXIyoghTkgJx5av9TBJdTKKCSe
bJemLN7cQx15c6aBd/ovQ+x/KROPDn28ajaA+cUAnjQU4fWX5g03y6mECd5Y+YAV
iKfRDsECWu80T0gwUNXQry+Hu3CgJ5DVz93lhNKdaGvuWOynmhniU+SY/T0zyB34
yyE/nmPtcgiPECsUsArWpWbWnzlZcJLbl9Y6HysOZq+fxtWCvneGL3l5vsY+ebXA
sWkst3ya5dTE2rSaUIn02xe6OsutXvXDC0nrDIqGGVPa+IcBKNoQ+Vm1lwfZrOh9
cJQylNlrJ46IF8PHWl0a6nbGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqkrtHK
st9Iv6dhCAxodO64gueHMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2
OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2
Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBa+AQmDq7KBBqIHqSF3nTLdjYMH5pPzeOm80L/dh3CDG7oe4Xqdr16
gbT/coc9EhCYkYWvksomn2pT/zSe5zgMIRI9mNXkIlpgMqFOmYXN6OKFIwdOWj8Y
38ol78VTmAyCQ7ZPKfbJSCZNBOoP+QKDMtYfyXKAL4aLj+r6/vakycdxJXLx6+t8
+d0pbIaUocPHSLLeJPtkgGIYGW25icX6rGUK6HBPZCg5shXC75i4z9eLr0cuWsoT
/op/glV3onNHGj1hjvX/jT2HVIyhrf0D3RB2rQwhLbDFa5zfGYLF4XYBkGvfmVjS
gqDgPoiuXZ2AipupiJKeXLufGOR/uM+J
-----END CERTIFICATE-----
Generated at Fri Dec 12 01:27:05 2025 by rpki-client